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(57) Abstract: A method for 
using a device that incorporates 
a magnetic stripe card reader 
head with a smart chip and can be 
connected to a computer network 
such as the Internet to authenticate 
a user to a remote server on the 
network. The method involves 
reading data from the magnetic 
stripe (101), verifying data from 
the magnetic stripe (102), receiving 
a personal identification number 
entered on a keyboard on the 
device (103), verifying the personal 
identification number (104), 
encrypting with a key contained in 
the smart chip a piece of data for 
sending to the remote server along 
with information identifying the 
source (106), and, on the remote 
server, looking up an appropriate 
key for decryption based on the 
identification of the source and 
verifying the authentication if the 
decryption is successful (108). 
Variations on the method include 

verifying the mag-stripe data on a remote server instead of within the smart chip, verifying the PIN on a remote server instead of 
within the smart chip, and adding various kinds of information to be sent to the server along with the essential elements required 
for authentication. The method may be used to authenticate digital signatures or signature guarantees, or for transactions using 
debit cards or credit cards. If the reader device with a smart chip is owned by a merchant, the merchant can further authenticate 
himself with a personal identification number, and the card holder will swipe his card into the device and identify himself with 
a second personal identification number. 
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